If a bank cannot secure their mobile payments app without requiring the banning of all other apps from the platform, maybe it's the bank that should be shipping their own secure device.